Manuals
Splunk® SOAR (On-premises)


Splunk SOAR (On-premises) is a Security Orchestration, Automation, and Response (SOAR) system that customers can install and configure in their own environments.

Release Notes
What's new in the latest release of Splunk SOAR.

Install and Upgrade Splunk SOAR (On-premises)
Install and upgrade Splunk SOAR (On-premises).

Get Started with the Splunk Mobile App for Splunk SOAR (On-premises)
Use the Splunk Mobile App for Splunk Phantom to take action directly from your mobile device.

Administer Splunk SOAR (On-premises)
Administer Splunk SOAR and customize the desired product settings.

Use Splunk SOAR (On-premises)
Learn how to use Splunk SOAR for security orchestration and automation using playbooks, workbooks, and cases.

Build Playbooks with the Playbook Editor
Learn how to create and manage playbooks in Splunk SOAR to automate analyst workflows.

Python Playbook API Reference for Splunk SOAR (On-premises)
Reference documentation for the Python automation API in Splunk SOAR.

Python Playbook Tutorial for Splunk SOAR (On-premises)
Tutorial for the Splunk SOAR Playbook API.

REST API Reference for Splunk SOAR (On-premises)
Reference documentation for Splunk SOAR REST API endpoints.

Develop Apps for Splunk SOAR (On-premises)
A technical development guide to help you develop your own Splunk SOAR apps.